CVE-2004-0591
EPSS 13.9%courier - cross-site scripting
Published: 8/6/2004Modified: 4/28/2026
Description
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.
Affected packages (2)
- Debian/courierfrom 0, < 0.45.4-4
- Debian/courierfrom 0, < 0.37.3-2.5